Privacy Policy

Effective date: 1 March 2026
Last updated: 1 March 2026

Mt Druitt Smiles (“we”, “us”, “our”) is committed to protecting your privacy and the confidentiality of your personal and health information. This policy explains what we collect, how we use it, who we share it with, and the choices you have. It applies to our clinic, website, and any forms or digital services we provide.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are and how to contact us

Practice name: Mt Druitt Smiles
Legal entity: MT. DRUITT DENTAL HUB PTY LTD
ABN: 73 682 746 318
Address:
Westfield Mt Druitt
Shop 11
49 North Parade (Corner Carlisle Ave & Luxford Rd)
Mount Druitt NSW 2770
Australia

Phone: (02) 8616 9739
Email: info@mtdruittsmiles.com.au
Website: https://mtdruittsmiles.com.au/

If you have any questions or wish to exercise your privacy rights, please contact us using the details above.

2. What information we collect

We may collect the following categories of information to provide you with safe and effective dental care and to run our practice:

Personal details: name, address, email, phone number, date of birth, emergency contact.
Health information: medical and dental history, clinical notes, x-rays and images, referrals, prescriptions, allergies, treatment plans, consent records.
Payment and claims information: billing details, health fund membership, Medicare/CDBS details, HICAPS claim data, invoices and receipts.
Identification and records: identification details where required, appointment history, and communication records including calls, SMS, and emails.
Website and online data: online forms you submit, IP address, device/browser data, cookies, and analytics data.

3. How we collect your information

We may collect your information:

directly from you in person, by phone, by email, or via online forms
from other healthcare providers, such as specialists or GPs, where you consent or where permitted by law
from your health fund, insurer, Medicare, or HICAPS for claims processing with your authority
from service providers who support our operations, such as practice software, payment processors, website systems, and secure messaging providers

4. Why we collect and use your information

We use your information to:

provide, plan, and manage your dental care and treatment
book appointments and communicate with you about reminders, results, treatment options, and post-operative instructions
process payments, health fund claims, and manage accounts
maintain clinical records and meet legal, regulatory, safety, and reporting obligations
improve our services and patient experience, including internal training, quality assurance, and de-identified analytics where appropriate

5. How we handle health information

We handle your personal and health information primarily to provide the dental and related health services you request, and to comply with our legal and professional obligations. Where required, we rely on your consent, including when obtaining records from another provider or sending certain communications.

6. Disclosures to third parties

We may disclose your information, only where reasonably necessary, to:

other health professionals involved in your care
laboratories, imaging providers, and specialists for treatment purposes
health funds, Medicare, and HICAPS to process claims
service providers who support the operation of our clinic, including practice management and patient portal providers such as Centaur Portal, payment processors, appointment systems, IT support, website service providers, and communications providers
regulators, professional bodies, or government authorities where required by law or for patient safety

7. Website, cookies and analytics

Our website may use cookies and similar technologies to help operate, secure, and improve the site. This includes the use of Google Analytics 4 (GA4) to understand website traffic and user behaviour, such as pages visited, time spent on site, device type, browser type, and general location information.

We also use Google Tag Manager (GTM) to manage and deploy website tags and related services. GTM itself does not typically collect personal information directly, but it may load tools that do.

You can adjust your browser settings to refuse cookies, however some features of the site may not function as intended.

8. Marketing communications

With your consent, or where otherwise permitted by law, we may send you appointment reminders, follow-up communications, and practice updates. You can opt out of non-essential marketing communications at any time by following the unsubscribe instructions in the message or by contacting us directly.

9. Data security

We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, or disclosure. These steps may include secure systems, access controls, staff training, password protection, and regular reviews of our internal processes.

10. Storage and overseas transfers

Your information may be stored electronically using secure cloud-based systems. Some service providers may store or process data in Australia and/or overseas. Where this occurs, we take reasonable steps to ensure appropriate privacy protections are in place.

11. Retention

Clinical records are retained in accordance with applicable legal and professional requirements. In New South Wales, health records for adults are generally retained for at least 7 years from the date of the last entry, and for minors generally until the patient turns 25 or for at least 7 years from the last entry, as applicable. We securely destroy or de-identify information when it is no longer required.

12. Access and correction

You may request access to the personal information we hold about you and request corrections if that information is inaccurate, out of date, incomplete, irrelevant, or misleading. We will respond within a reasonable time and may need to verify your identity before processing your request.

13. Children and CDBS

Where a child is eligible for the Child Dental Benefits Schedule (CDBS), we may collect relevant Medicare details and related information to process benefits with the authority of a parent or guardian.

14. Complaints

If you have a complaint about how we have handled your personal information, please contact us first using the contact details above. We will investigate your complaint and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

15. Changes to this policy

We may update this privacy policy from time to time. The latest version will be published on our website at https://mtdruittsmiles.com.au/privacy-policy/.